Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25189 | Windows DWM Core Library Elevation of Privilege Vulnerability https://www.aakashrahsi.online/post/cve-2026-25189 https://t.co/1bmZozl95U
Post summary
A new Windows DWM Core Library Elevation of Privilege vulnerability was announced with a link to an online post, but no PoC, exploit, or mitigation details were provided.
CVE-2026-25189 Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. https://www.cve.org/CVERecord?id=CVE-2026-25189
Post summary
The post discloses CVE-2026-25189 as a use-after-free vulnerability in Windows DWM Core Library that permits local privilege escalation, but it offers no PoC, exploit, patch, or evidence of active exploitation.
10 of 10 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1809 | - | - | x64 |
| OS | microsoft | windows_10_1809 | - | - | x86 |
| OS | microsoft | windows_10_21h2 | - | - | arm64 |
| OS | microsoft | windows_10_21h2 | - | - | x64 |
| OS | microsoft | windows_10_21h2 | - | - | x86 |
| OS | microsoft | windows_10_22h2 | - | - | arm64 |
| OS | microsoft | windows_10_22h2 | - | - | x64 |
| OS | microsoft | windows_10_22h2 | - | - | x86 |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_2022 | - | - | - |